Fortinet
NSE4_FGT-7.0 · Question #25
Refer to the exhibit. Review the Intrusion Prevention System (IPS) profile signature settings. Which statement is correct in adding the FTP.Login.Failed signature to the IPS sensor profile?
The correct answer is D. Traffic matching the signature will be silently dropped and logged. The Pass action on the specific signature would only be chosen, if the Action (on the top) was set to Default. But instead its set to Block, se the action is will be to block and drop.
Security Profiles
Question
Refer to the exhibit. Review the Intrusion Prevention System (IPS) profile signature settings. Which statement is correct in adding the FTP.Login.Failed signature to the IPS sensor profile?
Exhibit
Options
- AThe signature setting uses a custom rating threshold.
- BThe signature setting includes a group of other signatures.
- CTraffic matching the signature will be allowed and logged.
- DTraffic matching the signature will be silently dropped and logged.
How the community answered
(31 responses)- A13% (4)
- B3% (1)
- C23% (7)
- D61% (19)
Explanation
The Pass action on the specific signature would only be chosen, if the Action (on the top) was set to Default. But instead its set to Block, se the action is will be to block and drop.
Topics
#IPS profile#Signature settings#Traffic action#Logging
Community Discussion
No community discussion yet for this question.